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1.  Introduction 
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The  problem  of  "assuring  interactive  consistency"  is  defined  in  [PSL].  It  is  assumed  that  there  are  n 
isolated  processors,  of  which  at  most  m  are  faulty.  The  processors  can  communicate  by  means  of 
two  party  messages,  using  a  medium  which  is  reliable  and  of  negligible  delay.  The  sender  of  a 
message  is  always  identifiable  by  the  receiver.  Each  processor  p  has  a  private  value  o(p).  The 
problem  is  to  devise  an  algorithm  that  will  allow  each  processor  p  to  compute  a  value  lor  each 
processor  r,  such  that  (a)  if  p  and  r  are  nonfaulty,  then  p  computes  r's  private  value  o(r),  and  (b)  all  the 
nonfaulty  processors  compute  the  same  value  for  each  processor  r. 

It  is  shown  in  [PSL)  that  if  n  <  3m  +  1,  then  there  is  no  algorithm  which  assures  interactive 
consistency.  On  the  other  hand,  if  n  >  3m  +  1,  then  an  algorithm  does  exist.  The  algorithm 
presented  in  [PSL]  uses  m  +  1  rounds  of  communication,  and  thus  can  be  said  to  require  "time"  m  + 

1 .  An  obvious  question  is  whether  fewer  rounds  of  communication  suffice  to  solve  the  problem. 

In  this  paper,  we  answer  this  question  in  the  negative.  That  is,  we  show  that  any  algorithm  which 
assures  interactive  consistency  in  the  presence  of  m  faulty  processors  requires  at  least  m  +  1  rounds 
of  communication. 

The  remainder  of  the  paper  is  organized  as  follows.  Section  2  contains  motivation  for  our  formal 
model  and  problem  statement,  Section  3  contains  the  notation  and  definitions.  Section  4  contains  a 
reduction  of  our  set  of  allowable  algorithms  to  a  more  restrictive  set  of  "uniform"  algorithms.  Section 
5  contains  a  restatement  of  the  relevant  results  of  [PSL).  Section  6  contains  our  mam  lower  bound 
result.  Section  7  contains  an  important  open  question. 

The  reader  is  urged  to  read  [LSP]  and  [L]  for  discussion  of  the  practical  importance  of  assuring 
interactive  consistency,  and  [PSL]  for  additional  results  not  immediately  relevant  to  this  paper.  Other 
related  papers  are  [DW]  and  [D], 

2.  Motivation  for  the  Definitions 

A  general  model  for  solving  the  interactive  consistency  problem  might  consist  of  n  processors 
(automata)  communicating  by  means  of  n2  one  way  "communication  channels".  Each  channel  can 
be  formalized  as  a  shared  variable  which  can  be  modified  by  exactly  one  processor  and  read  by 
exactly  one  processor.  (Such  a  formalization  can  be  carried  out,  for  example,  within  the  model  of 
[LF] )  The  variables  which  each  processor  can  modify  are  called  its  "out  channels",  while  the 
variables  it  can  read  are  called  its  "in  channels". 
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Each  processor  p  starts  with  an  arbitrary  private  value  a(p).  Execution  of  the  system  proceeds  in 
synchronous  "rounds";  at  each  round,  the  following  two  steps  dccur:  (1)  First,  each  nonfaulty 
processor  writes  values  ("sends  messages")  derived  from  its  slate  into  all  of  its  out  channels,  while 
each  faulty  processor  writes  arbitrary  values  into  all  of  its  out  channels  (2)  Second,  each  processor 


J 


2 


reads  the  values  from  all  of  its  in-channels.  After  some  specified  number,  k,  of  rounds,  each 
processor  p  outputs  a  vector  of  values,  one  for  each  processor  r.  These  outputs  are  required  to 
satisfy  conditions  (a)  and  (b)  stated  in  the  Introduction. 

If  the  only  complexity  measure  of  interest  is  the  number  of  rounds,  then  we  can  assume  without  loss 
of  generality  that  the  messages  sent  by  each  nonfaulty  processor  p  on  the  first  round  are  all  exactly 
equal  to  its  private  value  o(p),  and  that  the  messages  sent  by  each  nonfaulty  processor  on 
subsequent  rounds  are  all  exactly  the  set  of  messages  received  from  all  processors  on  the  previous 
round.  That  is,  if  there  is  any  correct  k-round  algorithm,  then  there  is  a  correct  k-round  algorithm  in 
which  exactly  the  messages  described  above  are  sent.  This  is  so  because  (i)  it  is  clear  that  the  given 
information  is  the  maximum  nontrivial  information  which  could  be  sent,  (ii)  it  does  not  hurt  to  send 
nonfaulty  processors  the  maximum  information,  since  they  can  derive  any  needed  information  from 
the  given  maximum  information,  and  (iii)  it  does  not  hurt  to  send  faulty  processors  the  maximum 
information,  since  it  is  assumed  that  the  faulty  processors  can  send  arbitrary  messages  in  any  case  - 
i.e.  they  could  "guess"  any  missing  information. 

In  such  a  maximum-information  algorithm,  the  output  vector  of  each  processor  p  is  simply  a  function 
of  the  set  of  all  values  received  by  p  at  all  rounds  of  the  computation.  (So  far,  this  reduction  is  as  in 
[PSL]  .)  In  addition,  if  p  is  nonfaulty,  then  the  set  of  messages  received  by  p  at  all  rounds  of  the 
computation  is  determined  by  the  set  of  messages  received  by  p  at  the  last  round  (since  p  sends 
messages  to  itself  at  each  round  containing  the  information  p  received  at  earlier  rounds).  Since  the 
correctness  conditions  involve  only  the  outputs  of  nonfaulty  processors,  it  suffices  to  formalize  the 
output  of  p  as  a  function  of  the  set  of  messages  received  by  p  at  the  last  round  of  communication 
only. 

3.  Notation  and  Definitions 

If  A  is  any  alphabet,  i,  j  t  N  U  {0},  i  >  j,  we  use  A1'  to  denote  the  set  of  strings  of  symbols  in  A,  of 
length  at  least  i  and  at  most  j. 

Let  P  be  the  set  of  processors,  |P)  =  n,  and  let  m  be  an  upper  bound  on  the  number  of  faulty 
processors.  Fix  V  to  be  the  domain  of  values  on  which  the  processors  wish  to  reach  agreement. 
Assume  {0,1}  C  V. 

For  any  keNU  {0},  let  cUk  denote  the  set  of  mappings  from  Pk  into  V.  (An  element  of  rUk  is  Intended 
to  represent  a  set  of  messages  which  a  processor  could  receive  at  the  last  round  of  a  computation  ) 

A  k-round  algorithm  A  (for  P)  is  a  set  {Fp  :  p  c  P}  of  functions,  where  F^:  cUk  X  P  -*  V.  A  is  uniform  if 
Fp  =  Fq  ,or  aM  P'  0  e  P. 

A  k-round  scenario  (for  P  with  m  faults)  is  a  mapping  o:  P  1  k  + 1  -*  V,  such  that  |TJ  >  n  -  m,  where  T^ 
(the  set  of  truthtellers)  =  {q  c  P  :  o(wqp)  =  o(wq)  for  all  p  t  P  and  all  w  r  P0k  ’}  Intuitively, 
a^Pj.-.Pj)  is  intended  to  represent  the  value  in  V  which  p.  1  told  p.  that  p(  ?  told  p(  1  that .  that  p,  told 
p2  was  p^s  private  value,  as  a  special  case,  <r(p)  represents  p's  private  value.  (Note  that  this 
definition  reverses  the  direction  of  the  string  arguments  in  the  [PSL)  definition  ) 


Let  I  g  (the  cot  of  hars)  denote  P-T^.  If  a  :  P' 


V  and  p  r  P,  then  p's  view  of  a  is  the  nap  <rp  t  'll*  jr 
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given  by  op(w)  =  a(wp).  Let  Tk  =  {ap  :  a  is  a  kround  scenario  (for  P  with  m  faults)  and  p  e  T^} 
That  is,  T k  is  the  set  of  possible  views  for  p  when  p  is  a  truthteller  in  a  k  round  scenario. 

Let  A  =  {Fp  :  p  e  P}  be  a  k  round  algorithm.  Then  A  assures  interactive  consistency  (for  P  with  m 
faults)  provided  for  each  k  round  scenario  a  (for  P  with  m  faults),  the  following  two  conditions  hold 

(a)  (Validity)  Fp(ap,r)=  a(r)  for  all  p,  r  e  To, 

(b)  (Agreement)  Fp(<rp, r)  =  Fq(CTq' r)  ^or  a"  q  £  ancl  r  £ 

4.  Reduction  to  Uniform  Algorithms 

In  this  section,  we  show  that  it  suffices  to  restrict  attention  to  uniform  algorithms. 

Lemma  1:  Assume  n  >  2m +  1.  Let  A  =  {Fp  :  p  £  P)  be  a  k  round  algorithm  which 
assures  interactive  consistency.  Then  F  (a,r)  =  F  (a,r)  for  all  p,  q,  r  £  P  and  all  a  £  T  k  fl 

rk.  P 

q 

Proof:  Let  p,  q,  r  £  P,  a  £  Tk  fl  T k.  Then  there  are  k-round  scenarios  a  and  t  such  that  p 
£  T  ,  q  £  T  ,  and  a  -  a  =  r.Lets£T  ft  T  .  (Such  an  s  is  guaranteed  to  exist  because 

Q  T  PQ  <TT 

n  >  2m  +  1.) 

Modify  only  the  last  round  of  a  and  t  to  obtain  new  k-round  scenarios  o'  and  t’,  as  follows. 

Let  a'(ws)  =  a(wp)  for  all  w  e  Pk,  and  let  o'(x)  =  o(x)  otherwise.  Similarly,  let  t'(ws)  = 

-r(wq)  for  all  w  e  Pk,  and  let  t'(x)  a  T(x)  otherwise.  It  is  easy  to  check  that  a’  and  r’  are 
scenarios,  that  {p,s}  C  T  {q,s}  C  T  „  and  that  a  =  o’  -  o’  =  r’  =  t’  .  Thus,  F  (o,r) 
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=  Fp(w’p.r).  =  Fs((j’s.r)  by  the  agreement  property,  =  F^-r^r),  =  Fq(T’q.r)  by  ,he 
agreement  property,  =  F  (a,r). 

□ 

Theorem  1:  Assume  n  >  2m  +  1.  If  there  is  a  k  round  algorithm  which  assures  interactive 
consistency,  then  there  is  a  k-round  uniform  algorithm  which  assures  interactive  consistency. 

Proof:  Let  A  =  {Fp  :  p  £  P)  be  a  k  round  algorithm  which  assures  interactive  consistency. 

Define  F:  cUk  X  P  -*  V  as  follows.  Let  F  (a,r)  =  Fp(a,r)if  a  e  T  k, 

0  otherwise. 

Lemma  1  shows  that  this  definition  is  consistent.  Then  the  algorithm  which  uses  F  for  all 
processors  is  a  k  round  algorithm  which  assures  interactive  consistency. 

□ 

5.  Earlier  Results 

In  this  section,  we  state  the  two  relevant  results  from  [PSL]. 

Theorem  2:  Ascuinen<3m+  1.  Then  there  is  no  algoritl.  in  which  assures  interactive 


consistency. 

Proof:  [PSL], 

Theorem  3:  Assumen>3m  +  1.  Then  there  is  an  m  + 1 -round  uniform  algorithm  which 
assures  interactive  consistency. 

Proof:  [PSL], 

6.  Lower  Bound 

In  this  section,  we  present  our  main  result. 

Theorem  4:  If  k  <  m,  then  there  is  no  kround  algorithm  which  assures  interactive 
consistency. 

Proof:  The  theorem  is  easily  seen  to  be  true  if  m  =  0,  so  assume  that  m  >  1 .  Assume  that 
the  theorem  is  false:  that  k  <  m  and  there  is  a  k  round  algorithm  A  =  {Fp  :  p  c  P}  which 
assures  interactive  consistency.  By  Theorem  1,  we  can  assume  that  A  is  uniform,  i.e.  that 
Fp  =  F  for  all  p  e  P.  By  Theorem  2,  we  know  that  n  >  3  m  +  1 . 

Define  a  relation  ~  on  tUk  as  follows.  Let  a  -  (i  provided  there  exist  a  k  round  scenario  a 
and  p,  q  c  1  a  for  which  a  =  ap  and  /?  =  aq.  Let  s  be  the  smallest  equivalence  relation 
containing  ~.  By  the  agreement  property,  we  have: 

Fact  1:  F(a,r)  =  F(/3,r)  for  all  a,  /?  e  cUk  with  a  =  /?,  and  all  r  c  P. 

For  each  v  e  V,  w  e  Pk,  let  yv  (w)  =  v.  By  the  validity  property,  we  have: 

Fact  2:  F(yy,r)  =  v  for  all  r  e  P  and  all  v  e  V. 

Define  an  arbitrary  total  order  on  P,  let  N  =  n\  and  let  I:  Pk — >{1 N}  be  a  bijection 

corresponding  to  lexicographic  order  on  the  strings  in  Pk.  That  is,  if  v, 
we  PK,  0  <  i  <  k-1,  p,  q  e  P,  v  =  ^...^px,  w  =  rr..r.  qy  and  p  <  q,  then  l(v)  <  l(w). 

For  1  <  a  <  N  +  t.  define  a.  :  Pk  — *  {0,  1}  by 

ag(w)  =  0  if  l(w)  <  a, 

1  otherwise. 

Note  that  a,  =  y,  and  «N  + ,  =  yQ. 

We  claim  that  «a  ~  «a  + ,  for  all  a,1  <a  <  N.  If  so,  then  yt  =  ~  o2  «N+  =  y0,  so 

that  y,  =  yQ.  Fix  any  r  e  P.  By  Fact  1,  F(yvr)  =  F(y0,r).  However,  by  Fact  2,  F(y),r)  =  1 
and  F(y0,r)  =  0  This  provides  the  needed  contradiction. 

It  remains  to  prove  the  claim.  Fix  a,  1<a<N,  and  choose  r, ,  . .,rk  so  that  l(r(  ,.rk)  =  a.  By 
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assumption,  n-k  >  n-m  >  3m  +  1-m  =  2m +  1  >  2,  so  that  there  exist  two  distinct 

participants,  rk  +  1  and  rk  +  2,  in  P  {rt . rk},  Assume  without  loss  of  generality  that  rk  +  1  > 

rk*2  'n  orcier  on  P- We  construct  a  k-round  scenario  a  with  C  {r1,...,rk},  in 

which  a  =  a  .and  a  =a  .. 

rk  +  1  a  rk  +2  a+1 

Let  ff(w)  =  0  if  w  =  r1,..r.px,  where  0<i<k,  peP,  xc  P0kl,  and  p<  rj  +  1, 

1  otherwise. 


We  show  that  a  is  a  k-round  scenario,  with  C  {r1 . rk}.  Let  q  t  P  •  {r1 . r'k},  p  e  Pand 

weP0k1.  We  must  show  that  ff(wq)  =  a(wqp).  Now,  |wq|  <  k,  so  thatwq  is  of  the  form 
^...rsx,  where  i  <  k-1,  s  e  P,  and  s^r.  +  r  Then  a(wq)  =  Oifs<r.  +  1, 

1  otherwise, 


=  a(r1...r.sxp)  =  <T(wqp). 

Next,  we  show  that  a  =  a  .  Let  w  £  Pk.  Then  a  (w)  = 
rk  + 1  a  a 


0  if  I  (w)  <  a, 
1  otherwise, 


=  a(wrk+i)  =  a  (w). 

k  + 1 

Finally,  we  show  that  a  =  a  ..  Let  w  £  Pk.Then  ,  (w)  »  Oifl(w)<a, 

r  k  +  2  8+1  3+1 

1  otherwise, 

=  a(wrk  +  2)  since  rk  +  2<rk  +  1, 

=  a  (w). 
rk  +  2 

□ 


Note  that  Theorem  3  (of  the  previous  section)  provides  an  upper  bound  on  both  the  number  of 
processors  and  the  number  of  rounds.  Thus,  it  demonstrates  that  both  the  lower  bounds  of  Theorems 
2  and  4  are  tight. 

7.  Open  Question 

The  most  important  question  remaining  involves  the  amount  of  communication  and  storage  needed  to 
assure  interactive  consistency.  The  algorithm  in  [PSL],  which  uses  the  minimum  possible  number  of 
rounds,  involves  sending  enormous  amounts  of  information  •  approximately  nm  +  2  values  in  v.  We 
would  like  to  know  if  this  amount  can  be  reduced,  say  to  an  amount  polynomial  in  n  and  m  (using 
either  the  minimum  number,  m  +  1,  of  rounds,  or  perhaps  a  larger  number  of  rounds).  An  algorithm 
using  such  a  reduced  amo  nt  of  communication  might  be  of  considerably  more  practical  value  than 
the  current  algorithm. 
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20.  continued  <r  .  c.W  cX 

■  ->  '  c 

thep  p  computes  r's  private  value  a(r),  and  (b)  all  the  nonfaulty  processors 
compute  the  same  value  for  each  processor  r. 

It  is  shown  in  [PSL]  that  if  n  <  3m  +  1,  then  there  is  no  algorithm  which 
assures  interactive  consistency.  On  the  other  hand,  if  n  >.  3m  +  1,  then  an 
algorithm  does  exist.  The  algorithm  presented  in  [PSL]  uses  m  +  1  rounds  of 
communication,  and  thus  can  be  said  to  require  "time"  m  +  1.  An  obvious 
question  is  whether  fewer  rounds  of  communication  suffice  to  solve  the  problem. 

In  this  paper,  we  answer  this  question  in  the  negative.  That  is,  we  show 
that  any  algorithm  which  assures  interactive  consistency  in  the  presence  of  m 
faulty  processors  requires  at  least  m  +  1  rounds  of  communication. 
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